Vulnerability in Freebsd

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

EPSS: 0.007 (49.5th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 3.0, 3.1, 3.2
  • Netbsd — versions 1.4, 1.4.1, 1.4.2
  • Openbsd — versions 2.5, 2.6, 2.7
  • N/a — versions n/a

References